NVD

CVE-2007-5958 Detail

Modified

This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.

Description

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: 5.0 MEDIUM

Vector: (AV:N/AC:L/Au:N/C:P/I:N/A:N)

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink	Resource
http://bugs.gentoo.org/show_bug.cgi?id=204362
http://bugs.gentoo.org/show_bug.cgi?id=204362
http://docs.info.apple.com/article.html?artnum=307562
http://docs.info.apple.com/article.html?artnum=307562
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html
http://lists.freedesktop.org/archives/xorg/2008-January/031918.html
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
http://secunia.com/advisories/28273
http://secunia.com/advisories/28273
http://secunia.com/advisories/28532
http://secunia.com/advisories/28532
http://secunia.com/advisories/28535
http://secunia.com/advisories/28535
http://secunia.com/advisories/28536
http://secunia.com/advisories/28536
http://secunia.com/advisories/28539
http://secunia.com/advisories/28539
http://secunia.com/advisories/28540
http://secunia.com/advisories/28540
http://secunia.com/advisories/28542
http://secunia.com/advisories/28542
http://secunia.com/advisories/28543
http://secunia.com/advisories/28543
http://secunia.com/advisories/28550
http://secunia.com/advisories/28550
http://secunia.com/advisories/28584
http://secunia.com/advisories/28584
http://secunia.com/advisories/28592
http://secunia.com/advisories/28592
http://secunia.com/advisories/28616
http://secunia.com/advisories/28616
http://secunia.com/advisories/28718
http://secunia.com/advisories/28718
http://secunia.com/advisories/28843
http://secunia.com/advisories/28843
http://secunia.com/advisories/28885
http://secunia.com/advisories/28885
http://secunia.com/advisories/28997
http://secunia.com/advisories/28997
http://secunia.com/advisories/29420
http://secunia.com/advisories/29420
http://secunia.com/advisories/29622
http://secunia.com/advisories/29622
http://secunia.com/advisories/29707
http://secunia.com/advisories/29707
http://secunia.com/advisories/30161
http://secunia.com/advisories/30161
http://secunia.com/advisories/32545
http://secunia.com/advisories/32545
http://security.gentoo.org/glsa/glsa-200801-09.xml
http://security.gentoo.org/glsa/glsa-200801-09.xml
http://security.gentoo.org/glsa/glsa-200804-05.xml
http://security.gentoo.org/glsa/glsa-200804-05.xml
http://securitytracker.com/id?1019232
http://securitytracker.com/id?1019232
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1
http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm
http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm
http://www.debian.org/security/2008/dsa-1466
http://www.debian.org/security/2008/dsa-1466
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:021
http://www.mandriva.com/security/advisories?name=MDVSA-2008:021
http://www.mandriva.com/security/advisories?name=MDVSA-2008:022
http://www.mandriva.com/security/advisories?name=MDVSA-2008:022
http://www.mandriva.com/security/advisories?name=MDVSA-2008:023
http://www.mandriva.com/security/advisories?name=MDVSA-2008:023
http://www.mandriva.com/security/advisories?name=MDVSA-2008:025
http://www.mandriva.com/security/advisories?name=MDVSA-2008:025
http://www.openbsd.org/errata41.html#012_xorg
http://www.openbsd.org/errata41.html#012_xorg
http://www.openbsd.org/errata42.html#006_xorg
http://www.openbsd.org/errata42.html#006_xorg
http://www.redhat.com/support/errata/RHSA-2008-0029.html
http://www.redhat.com/support/errata/RHSA-2008-0029.html
http://www.redhat.com/support/errata/RHSA-2008-0030.html
http://www.redhat.com/support/errata/RHSA-2008-0030.html
http://www.redhat.com/support/errata/RHSA-2008-0031.html
http://www.redhat.com/support/errata/RHSA-2008-0031.html
http://www.securityfocus.com/archive/1/487335/100/0/threaded
http://www.securityfocus.com/archive/1/487335/100/0/threaded
http://www.securityfocus.com/bid/27336	Patch
http://www.securityfocus.com/bid/27336	Patch
http://www.securityfocus.com/bid/27356
http://www.securityfocus.com/bid/27356
http://www.vupen.com/english/advisories/2008/0179
http://www.vupen.com/english/advisories/2008/0179
http://www.vupen.com/english/advisories/2008/0184
http://www.vupen.com/english/advisories/2008/0184
http://www.vupen.com/english/advisories/2008/0497/references
http://www.vupen.com/english/advisories/2008/0497/references
http://www.vupen.com/english/advisories/2008/0924/references
http://www.vupen.com/english/advisories/2008/0924/references
http://www.vupen.com/english/advisories/2008/3000
http://www.vupen.com/english/advisories/2008/3000
https://exchange.xforce.ibmcloud.com/vulnerabilities/39769
https://exchange.xforce.ibmcloud.com/vulnerabilities/39769
https://issues.rpath.com/browse/RPL-1970
https://issues.rpath.com/browse/RPL-1970
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393
https://usn.ubuntu.com/571-1/
https://usn.ubuntu.com/571-1/
https://www.exploit-db.com/exploits/5152
https://www.exploit-db.com/exploits/5152
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	NIST

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

7 change records found show changes

CVE Modified by CVE 11/20/2024 7:39:02 PM

Action	Type	New Value
Added	Reference	http://bugs.gentoo.org/show_bug.cgi?id=204362
Added	Reference	http://docs.info.apple.com/article.html?artnum=307562
Added	Reference	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
Added	Reference	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
Added	Reference	http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
Added	Reference	http://lists.freedesktop.org/archives/xorg/2008-January/031918.html
Added	Reference	http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
Added	Reference	http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
Added	Reference	http://secunia.com/advisories/28273
Added	Reference	http://secunia.com/advisories/28532
Added	Reference	http://secunia.com/advisories/28535
Added	Reference	http://secunia.com/advisories/28536
Added	Reference	http://secunia.com/advisories/28539
Added	Reference	http://secunia.com/advisories/28540
Added	Reference	http://secunia.com/advisories/28542
Added	Reference	http://secunia.com/advisories/28543
Added	Reference	http://secunia.com/advisories/28550
Added	Reference	http://secunia.com/advisories/28584
Added	Reference	http://secunia.com/advisories/28592
Added	Reference	http://secunia.com/advisories/28616
Added	Reference	http://secunia.com/advisories/28718
Added	Reference	http://secunia.com/advisories/28843
Added	Reference	http://secunia.com/advisories/28885
Added	Reference	http://secunia.com/advisories/28997
Added	Reference	http://secunia.com/advisories/29420
Added	Reference	http://secunia.com/advisories/29622
Added	Reference	http://secunia.com/advisories/29707
Added	Reference	http://secunia.com/advisories/30161
Added	Reference	http://secunia.com/advisories/32545
Added	Reference	http://security.gentoo.org/glsa/glsa-200801-09.xml
Added	Reference	http://security.gentoo.org/glsa/glsa-200804-05.xml
Added	Reference	http://securitytracker.com/id?1019232
Added	Reference	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1
Added	Reference	http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1
Added	Reference	http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm
Added	Reference	http://www.debian.org/security/2008/dsa-1466
Added	Reference	http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
Added	Reference	http://www.mandriva.com/security/advisories?name=MDVSA-2008:021
Added	Reference	http://www.mandriva.com/security/advisories?name=MDVSA-2008:022
Added	Reference	http://www.mandriva.com/security/advisories?name=MDVSA-2008:023
Added	Reference	http://www.mandriva.com/security/advisories?name=MDVSA-2008:025
Added	Reference	http://www.openbsd.org/errata41.html#012_xorg
Added	Reference	http://www.openbsd.org/errata42.html#006_xorg
Added	Reference	http://www.redhat.com/support/errata/RHSA-2008-0029.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2008-0030.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2008-0031.html
Added	Reference	http://www.securityfocus.com/archive/1/487335/100/0/threaded
Added	Reference	http://www.securityfocus.com/bid/27336
Added	Reference	http://www.securityfocus.com/bid/27356
Added	Reference	http://www.vupen.com/english/advisories/2008/0179
Added	Reference	http://www.vupen.com/english/advisories/2008/0184
Added	Reference	http://www.vupen.com/english/advisories/2008/0497/references
Added	Reference	http://www.vupen.com/english/advisories/2008/0924/references
Added	Reference	http://www.vupen.com/english/advisories/2008/3000
Added	Reference	https://exchange.xforce.ibmcloud.com/vulnerabilities/39769
Added	Reference	https://issues.rpath.com/browse/RPL-1970
Added	Reference	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991
Added	Reference	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393
Added	Reference	https://usn.ubuntu.com/571-1/
Added	Reference	https://www.exploit-db.com/exploits/5152
Added	Reference	https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html
Added	Reference	https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html

CVE Modified by Red Hat, Inc. 9/28/2017 9:29:45 PM

Action	Type	Old Value	New Value
Added	Reference		https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991 [No Types Assigned]
Added	Reference		https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393 [No Types Assigned]
Added	Reference		https://www.exploit-db.com/exploits/5152 [No Types Assigned]
Removed	Reference	http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10991 [No Types Assigned]
Removed	Reference	http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5393 [Tool Signature, US Government Resource]
Removed	Reference	http://www.milw0rm.com/exploits/5152 [No Types Assigned]

Quick Info

CVE Dictionary Entry:
CVE-2007-5958
NVD Published Date:
01/18/2008
NVD Last Modified:
11/20/2024
Source:
Red Hat, Inc.

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2007-5958 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by CVE 11/20/2024 7:39:02 PM

CVE Modified by Red Hat, Inc. 5/13/2024 9:49:05 PM

CVE Modified by Red Hat, Inc. 10/15/2018 5:47:45 PM

CVE Modified by Red Hat, Inc. 10/03/2018 5:51:04 PM

CVE Modified by Red Hat, Inc. 9/28/2017 9:29:45 PM

CVE Modified by Red Hat, Inc. 7/28/2017 9:33:57 PM

Initial CVE Analysis 1/21/2008 8:53:00 AM

Quick Info